全部产品
Search
文档中心

访问控制:AliyunYundunBastionHostReadOnlyAccess

更新时间:Dec 16, 2024

AliyunYundunBastionHostReadOnlyAccess 是阿里云管理的产品系统策略,您可以将 AliyunYundunBastionHostReadOnlyAccess 授权给 RAM 身份(RAM 用户、RAM 用户组和 RAM 角色),本策略定义了只读访问云盾堡垒机(BastionHost)的权限。

策略详情

  • 类型:系统策略

  • 创建时间:2017-08-11 02:50:59

  • 更新时间:2024-12-16 11:13:07

  • 当前版本:v4

策略内容

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "yundun-bastionhost:Get*",
                "yundun-bastionhost:Describe*",
                "yundun-bastionhost:Query*",
                "yundun-bastionhost:List*"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": "pam:GetInstanceDetail",
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": "ram:CheckServiceLinkedRoleExistence",
            "Resource": "*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": "bastionhost.aliyuncs.com"
                }
            }
        }
    ]
}

相关文档